skills/clawlink-hq/skills/postmark/Socket

postmark

Warn

Audited by Socket on Jun 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill's Postmark purpose is plausible, but it depends on a third-party hosted broker and external CLI rather than Postmark's official direct API flow. The main risk is credential and data mediation through ClawLink plus the ability to perform outbound email actions; this is a medium-high security risk, not confirmed malware.

Confidence: 85%Severity: 68%

Audit Metadata

Analyzed At

Jun 28, 2026, 02:46 PM

Package URL

pkg:socket/skills-sh/clawlink-hq%2Fskills%2Fpostmark%2F@9d22c19a534afe4a9bcc70ffd0dce87267bfcefe246e671aafe169ed9e33812f